Vulnerabilities > GNU > Binutils
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2021-06-02 | CVE-2021-3530 | Uncontrolled Recursion vulnerability in multiple products A flaw was discovered in GNU libiberty within demangle_path() in rust-demangle.c, as distributed in GNU Binutils version 2.36. | 7.5 |
| 2021-05-26 | CVE-2021-3549 | Out-of-bounds Write vulnerability in GNU Binutils 2.36 An out of bounds flaw was found in GNU binutils objdump utility version 2.36. | 7.1 |
| 2021-04-29 | CVE-2021-20294 | Out-of-bounds Write vulnerability in GNU Binutils 2.35/2.35.1 A flaw was found in binutils readelf 2.35 program. | 7.8 |
| 2021-03-26 | CVE-2021-20284 | Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple products A flaw was found in GNU Binutils 2.35.1, where there is a heap-based buffer overflow in _bfd_elf_slurp_secondary_reloc_section in elf.c due to the number of symbols not calculated correctly. | 5.5 |
| 2021-03-26 | CVE-2021-20197 | Link Following vulnerability in multiple products There is an open race window when writing output in the following utilities in GNU binutils version 2.35 and earlier:ar, objcopy, strip, ranlib. | 6.3 |
| 2021-01-04 | CVE-2020-35507 | NULL Pointer Dereference vulnerability in multiple products There's a flaw in bfd_pef_parse_function_stubs of bfd/pef.c in binutils in versions prior to 2.34 which could allow an attacker who is able to submit a crafted file to be processed by objdump to cause a NULL pointer dereference. | 5.5 |
| 2021-01-04 | CVE-2020-35496 | NULL Pointer Dereference vulnerability in multiple products There's a flaw in bfd_pef_scan_start_address() of bfd/pef.c in binutils which could allow an attacker who is able to submit a crafted file to be processed by objdump to cause a NULL pointer dereference. | 5.5 |
| 2021-01-04 | CVE-2020-35495 | NULL Pointer Dereference vulnerability in multiple products There's a flaw in binutils /bfd/pef.c. | 5.5 |
| 2021-01-04 | CVE-2020-35494 | Use of Uninitialized Resource vulnerability in multiple products There's a flaw in binutils /opcodes/tic4x-dis.c. | 6.1 |
| 2021-01-04 | CVE-2020-35493 | Improper Input Validation vulnerability in multiple products A flaw exists in binutils in bfd/pef.c. | 5.5 |